On the relay side, the flow is as follows:

On connect, immediate send auth challenge.  Go into a loop, for any event, req send ok=false and close and additional auth challenge until a successful auth is received.  Then send ok to the auth, and any subsequent auths.  Then pass the next messages to strfry which should respond ok (unless you disco too fast)